Own and evolve the Cyber Risk Management Framework
Govern cyber risk taxonomies, risk appetite statements, risk metrics, and assessment methodologies
Provide oversight of control assurance and remediation execution and quality
Ensure consistent linkage between assessment outcomes and remediation priorities
Enable and guide Enterprise Process Owner with challenges related to processes area
Support the second line of defense in defining, maintaining, and overseeing Cyber Key Risk Indicators (KRIs) and thresholds
Produce and oversee executive-level cyber risk reporting
Serve as the primary cyber risk interface with Technology Risk Advisors (TRAs)

10+ years of experience in cybersecurity risk management, technology risk, or enterprise risk governance
Bachelor’s degree in information systems, computer science, data analytics, cybersecurity or related field
Deep understanding of cyber risk frameworks, enterprise risk management, and regulatory expectations
Proven experience with risk governance, control assurance and assessments, KRIs, issue management, and executive reporting
Strong ability to build relationships across the three lines of defense and influence at executive and Board levels
Exceptional communication skills, with the ability to translate technical and risk concepts into executive‑level insights
Experience leading highly successful teams in achieving objectives and key results

401K with company match
Health insurance including basic life, medical, dental, vision, long-term disability
Paid-time off including vacation, sick leave, short term disability, family care
Employee Assistance Program
Performance-based awards

MD GRC Risk Management – Governance

Key skills